LDAP Recorder Laravel

The LDAP Recorder for Laravel is a developer-focused tool that captures LDAP operations performed by Laravel applications against an LDAP directory, enabling debugging, auditing, and reproducible testing. Primary users are backend developers, QA engineers, and security auditors who need visibility into bind, search, and modify operations during integration, migrations, or incident analysis. It is used when validating authentication flows, directory lookups, and data synchronization in staging or production-like environments.
The tool operates as a Laravel-native recorder and replay engine. Required features include capturing LDAP events (bind, search, modify, delete) with timestamps, storing structured logs, secure storage of credentials, and a replay mode against a target LDAP server. Optional/advanced features include operation filtering, multi-tenant workspaces, deterministic replay, export to JSON, TLS/SSL support, and tight integration with Laravel's service container for automatic enablement.
Inputs include ldap_host, ldap_port, use_ssl, bind_dn, bind_password, base_dn, user_filter, capture_mode, log_store. Outputs are logs, replay_results, and summary metrics. Validation ensures required fields are present; sample values are provided for typical deployments. The capture engine serializes each LDAP call as an event with operation_type, dn, attributes, result_status, and timing. Replay uses the recorded sequence to issue equivalent operations against the target server, optionally masking credentials. Deterministic replay is supported by preserving order. Encryption of sensitive fields is applied at rest. The tool handles invalid host/port, unreachable servers, and authentication failures with domain-appropriate error codes in logs, surfacing external data unavailability without crashing the host app. Aligns with LDAP RFCs and UTF-8 handling; logs may contain personal data and should comply with applicable privacy regulations per project policy. Assumes Laravel PHP 7.4+ and an LDAP-integrated auth flow; UI, front-end behavior, and non-LDAP protocols are out of scope.